httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Yann Ylavic <ylavic....@gmail.com>
Subject Re: svn commit: r1748371 - /httpd/httpd/branches/2.4.x/STATUS
Date Tue, 14 Jun 2016 09:49:31 GMT
On Tue, Jun 14, 2016 at 11:42 AM,  <ylavic@apache.org> wrote:
> Author: ylavic
> Date: Tue Jun 14 09:42:15 2016
> New Revision: 1748371
>
> URL: http://svn.apache.org/viewvc?rev=1748371&view=rev
> Log:
> Propose fix for 2.4.21 (before release).
>
> Modified:
>     httpd/httpd/branches/2.4.x/STATUS
>
[]
>
> +   *) mod_ssl: Don't enable CRL checks/flags by default.
> +               (follow up/fix to r1748338 committed in 2.4.21)
> +     trunk patch: http://svn.apache.org/r1748368
> +     2.4.x: trunk works
> +     +1: ylavic

This may be needed to prevent ssl_callback_SSLVerify() from ignoring
X509_V_ERR_UNABLE_TO_GET_CRL whereas no SSLCARevocationCheck
option/flag is set (default initialization to UNSET/-1 actually sets
everything...).
Sorry for the initial mistake.

Regards,
Yann.

Mime
View raw message